e:\
Static task
static1
Behavioral task
behavioral1
Sample
313347bda34a78d4d33410bdabed45eb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
313347bda34a78d4d33410bdabed45eb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
313347bda34a78d4d33410bdabed45eb_JaffaCakes118
-
Size
580KB
-
MD5
313347bda34a78d4d33410bdabed45eb
-
SHA1
d1cc78ee3e91ec1192fd038d9f767bdad6764e06
-
SHA256
b16f8ae62e80ff43413f749f663aa61f549f7d9d71fe6353217a3806c728949e
-
SHA512
bcf007743e04202ecbf34714699b7fb134f9938b25654d428f6a64427ec411144fabc54082ac56b5e0bb520ac24eed4a48d50676bed57afd069f8511572f9900
-
SSDEEP
12288:xiRAoshG7CqRje82W3J3VxSH8v8ivL1r2R:xzHGGxW3lSH8v8G1K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 313347bda34a78d4d33410bdabed45eb_JaffaCakes118
Files
-
313347bda34a78d4d33410bdabed45eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
d5c0f986f47a988f0328bbdd742c4c59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetQueryDataAvailable
InternetErrorDlg
InternetReadFile
SetUrlCacheConfigInfoA
FindNextUrlCacheContainerA
FindNextUrlCacheGroup
FindFirstUrlCacheEntryExA
InternetReadFileExA
user32
GetClassNameA
GetSystemMetrics
OemToCharBuffA
SetDlgItemTextA
PostQuitMessage
GetClassInfoExA
EnableWindow
LoadCursorA
GetClientRect
DdeSetQualityOfService
MessageBoxA
ToUnicodeEx
OemKeyScan
LoadIconW
PaintDesktop
GetDCEx
RegisterClassExA
GetClassLongW
CreateIconIndirect
DrawTextW
SendMessageA
ShowWindow
GetKeyboardLayoutNameW
EditWndProc
GetScrollRange
GetPropA
UnhookWinEvent
DdeNameService
DefWindowProcW
IsDialogMessage
IsWindowUnicode
DestroyWindow
GetKeyNameTextA
GetWindowTextA
SetProcessDefaultLayout
GetWindowPlacement
AppendMenuW
FindWindowA
IsZoomed
RegisterDeviceNotificationW
CreateWindowStationW
FlashWindow
ChangeDisplaySettingsExW
PostMessageA
DdeCmpStringHandles
TranslateAcceleratorA
TileWindows
CharPrevW
DdeFreeStringHandle
SetScrollPos
EnableScrollBar
RegisterClassA
GetMenuState
CharUpperW
SetWindowTextW
WinHelpA
EndTask
GetScrollInfo
PostThreadMessageA
DdeUnaccessData
FindWindowExA
CloseWindowStation
DrawTextA
IsRectEmpty
BroadcastSystemMessage
InsertMenuW
GetKeyboardState
InvertRect
DlgDirListComboBoxA
CreateWindowExW
kernel32
GetSystemTimeAsFileTime
LCMapStringW
HeapCreate
CompareStringW
FreeEnvironmentStringsA
GetProfileSectionW
GetLocaleInfoW
FindResourceExW
TerminateThread
HeapDestroy
FreeEnvironmentStringsW
InterlockedIncrement
OpenMutexW
WriteFile
VirtualProtect
GetSystemInfo
IsValidCodePage
GetFileType
EnterCriticalSection
CreateMutexA
GetDateFormatA
GetNamedPipeHandleStateW
TlsSetValue
lstrlenA
SetConsoleCtrlHandler
GetCurrentThreadId
CompareStringA
TerminateProcess
GetStringTypeW
GetFileAttributesExA
ReleaseMutex
MultiByteToWideChar
CloseHandle
GetProcAddress
ExitProcess
GetLastError
LCMapStringA
IsValidLocale
SetEnvironmentVariableA
VirtualQuery
SetLastError
GetStringTypeA
GetCurrentThread
LoadLibraryA
SetStdHandle
GetModuleHandleA
InitializeCriticalSection
SetHandleCount
GetOEMCP
WriteConsoleInputW
VirtualAlloc
CompareFileTime
CreateFileMappingA
GetCommandLineA
SetThreadAffinityMask
GetCurrentProcessId
TlsAlloc
TlsGetValue
GetThreadContext
IsBadReadPtr
OpenMutexA
GetTimeFormatA
FindResourceA
HeapFree
GetACP
GetModuleFileNameW
HeapAlloc
InterlockedDecrement
GetEnvironmentStrings
QueryPerformanceCounter
WriteProfileStringW
GetUserDefaultLCID
LeaveCriticalSection
UnhandledExceptionFilter
GetModuleFileNameA
GetTimeZoneInformation
DeleteCriticalSection
EnumSystemLocalesA
GetStartupInfoW
GetLogicalDriveStringsW
FlushFileBuffers
IsBadWritePtr
HeapReAlloc
GetVersionExA
RtlUnwind
ReadFile
lstrcatA
GetStartupInfoA
GlobalHandle
GetCPInfo
InterlockedExchange
VirtualFree
OutputDebugStringA
HeapValidate
GetEnvironmentStringsW
GetStdHandle
GetLocalTime
WideCharToMultiByte
GetCommandLineW
GetCurrentProcess
SetFilePointer
GetLocaleInfoA
TlsFree
DebugBreak
GetTickCount
advapi32
CryptSetKeyParam
ReportEventA
GetUserNameW
RegCloseKey
CryptHashSessionKey
comctl32
CreateStatusWindowA
InitCommonControlsEx
ImageList_GetIconSize
ImageList_LoadImageA
ImageList_SetIconSize
ImageList_DragShowNolock
ImageList_Replace
ImageList_GetIcon
comdlg32
FindTextW
shell32
SHChangeNotify
ExtractIconEx
SHGetMalloc
Sections
.text Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 268KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ